diff --git a/rafts/api/validator/VERSION b/rafts/api/validator/VERSION
new file mode 100644
index 00000000..a6d05ccd
--- /dev/null
+++ b/rafts/api/validator/VERSION
@@ -0,0 +1,7 @@
+## deployable containers have a semantic and build tag
+# semantic version tag: major.minor[.patch]
+# build version tag: timestamp
+# tag: {semantic}-{build}
+VER=1.0.0
+TAGS="${VER} ${VER}-$(date -u +"%Y%m%dT%H%M%S")"
+unset VER
diff --git a/rafts/frontend/Dockerfile b/rafts/frontend/Dockerfile
index 44527278..0e51cfca 100644
--- a/rafts/frontend/Dockerfile
+++ b/rafts/frontend/Dockerfile
@@ -39,8 +39,8 @@ WORKDIR /app
 RUN apk add --no-cache dumb-init
 
 # Create non-root user
-RUN addgroup -g 1001 -S nodejs && \
-    adduser -S nextjs -u 1001
+RUN addgroup -g 1001 -S nextjs && \
+    adduser -S nextjs -u 1001 -G nextjs
 
 # Copy built application
 COPY --from=builder /app/public ./public
@@ -55,7 +55,7 @@ ENV PORT=8080
 ENV HOSTNAME="0.0.0.0"
 
 # Change ownership to non-root user
-RUN chown -R nextjs:nodejs /app
+RUN chown -R nextjs:nextjs /app
 
 USER nextjs
 
diff --git a/rafts/frontend/VERSION b/rafts/frontend/VERSION
new file mode 100644
index 00000000..606f89a9
--- /dev/null
+++ b/rafts/frontend/VERSION
@@ -0,0 +1,7 @@
+## deployable containers have a semantic and build tag
+# semantic version tag: major.minor[.patch]
+# build version tag: timestamp
+# tag: {semantic}-{build}
+VER=1.0.1
+TAGS="${VER} ${VER}-$(date -u +"%Y%m%dT%H%M%S")"
+unset VER